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Electronic data storage and display apparatus. 

This invention relates to electronic data storage and 
display apparatus, and in particular to such apparatus 
5 for the storage and display of electronic data that has 

commercial value such as electronically formatted books. 

With the advances in the fields of microchip and display 
screen technologies, and allied computing advances it is 
10 becoming increasingly economically viable to produce 

apparatus that is easily portable and can store, 
manipulate and display large quantities of electronic 
data. There is, however, often a reluctance on the part 
i=i of the owners of that data to release it to members of 

OEE the. public because of the ease of replication of 

■SS electronic data. For data with commercial value such 

i;0 replication deprives the parties involved with the 

j; y genesis and distribution of the data of a suitable 

jp reward for the production or distribution of that data. 

20 For example, if the data when rendered legible by 

IS suitable software is the text of a book, then if the 

data becomes available to the public not under the 
control of a distributor, copyright owner or the like, 
then if electronic copies of that data may easily be 
25 made, the publisher of that data and possibly others 

will suffer economic damage, for example being able only 
to sell fewer copies of a book than would otherwise be 
the case . 

30 One approach is to render the data "copy-protected". 

This can be effective in some environments, though there 
is a widespread belief that copy -protection systems 
simply pose a challenge to those who would 'circumvent 
them. However, copy -protection systems which rely on 

3 5 encryption and decryption of data provide some 

effectiveness, for example as described in WO 97/44736. 
However, the system is cumbersome and not always user - 
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friendly. Systems which have been proposed for use in 
* this area include those described in EP-A- 0665486 , WO 

95/08231, WO 98/08344 and WO99/12087 , though the last of 
these does not form part of the state of the art. All 
5 seek to enhance the security against copying by using 

cryptographic techniques and generally require the use 
of encryption/decryption keys which are transmitted, 
after an authenticated request has been received, e.g. 
over a suitable communications link which has been 
10 established for that purpose. 

The present invention provides apparatus for the 
transmittal, reception, storage, and display of data in 
^ an electronic format in which there is provided a casing 

j;nl5 that includes a data storage means, a data display 

\*2 means, and a data transmission/reception means including 

iTj at least one output/input port, and wherein the data 

l 1 ^ transmission/reception means includes means for 

H== decrypting received data and placing it in the data 

j;320 storage means, encrypting and transmitting data from the 

! M data storage means and means for storing at least one 

j-n- encryption key, and characterised in that the apparatus 

is configured such that one encryption key references 
addresses in a portion of Read Only Memory forming part 
25 of the apparatus, and the content of those addresses is 

used to encrypt /decrypt transmitted/received data. 

This approach, especially when used on a direct 
communications channel between user and information 
30 provider, rather than via a wide area network such as 

the internet, is advantageous as there is never any need 
to engage in a key request dialogue. Instead, an 
encryption/decryption key may be generated and used by 
reference to the addresses of resident code areas in ROM 
35 in the apparatus. This is explained in more detail 

below . 
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In use, for example when the user of the apparatus 
wishes to obtain an electronic version of a book, the 
user connects the apparatus of the present invention to 
an appropriate source of electronic data in the 
following manner : 

i) the apparatus enters into electronic communication 
with the data source and sends an identification 
code to the data source, 

ii) the data source confirms the identity of the 
apparatus and thereby determines what encryption 
key to use in communicating with the apparatus, 

iii) the user of the apparatus causes the apparatus to 
send a code to the data source identifying the data 
to be received by the apparatus, 

iv) the data source transmits the identified data in 
encrypted form to the apparatus which decrypts that 
data and places it in the data storage means, 

v) the data source transmits a new encryption key to 
the apparatus, which key overwrites the previous 
encryption key, and 

vi) the communication between the apparatus and the 
data source is broken. 

By having the apparatus and the data source interact in 
this fashion, the electronic data is encrypted when it 
is travelling between the owners or distributors of the 
data and the legitimate end user of the data. Because 
the encryption key between the data source and the 
apparatus is altered after each transaction, it will be 
very difficult for an illegitimate receiver of the data 
to decrypt that data. Even if that does prove possible, 
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the illegitimate receiver only then gains the encryption 
key for one specific piece of apparatus the next time it 
connects to the data source and not the data source as a 
whole . 

In a particularly preferred embodiment of the present 
invention the apparatus stores two encryption keys, one 
of which is stored in either Electronically Erasable 
Programable Read Only Memory or non-volatile Random 
Access Memory, and the other of which is stored in Read 
Only Memory. The encryption key in the Electronically 
Erasable Programable Read Only Memory or non-volatile 
Random Access Memory is the key that is rewritten when 
the apparatus interacts with a data store. 

In a preferred embodiment of the present invention, the 
encryption key in the Electronically Erasable 
Programable Read Only Memory or non-volatile Random 
Access Memory is 16 bytes in size. The portion of Read 
Only Memory, the content of which is used to 
encrypt/decrypt transmitted/received data, is preferably 
256 bytes in size. 

The data storage means in the apparatus of the present 
invention is preferably non-volatile random access 
memory. It may, however, alternatively be in the form 
of a magnetic disk, built into the casing and so 
constructed that attempts to remove the disc would 
result in the destruction of at least the data on the 
disc, or any other known data storage media which could 
be built into the casing. 

The method of communication between the apparatus of the 
present invention and the data store is most preferably 
via the telephone network, and at least one input/output 
port in the casing is adapted to connect to that network 
most preferably via an electromagnetic radiation link. 
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In alternative embodiments other methods of connection 
the data source are possible and at least one 
input/output port in the casing is appropriately 
configured for that connection. 

In a preferred embodiment of the present invention, the 
display means includes a display screen and computer 
hardware and software to enable presentation of the data 
in graphical and/or textual form. The computer hardware 
preferably includes user control means which will allow 
a user of the apparatus to move through the data in an 
appropriate fashion. The display screen of the present 
invention is preferably of sufficient size that the 
viewing area thereof is at least 110mm by 180mm. The 
screen is preferably of a type that has a low power 
consumption . 

In an alternative embodiment of the present invention, 
the apparatus additionally includes known means for the 
generation of sound. The sound generation means can be 
controlled by the computer software that controls the 
display means, or by independent control means. In this 
embodiment the reader of, for example, a book about 
ornithology may be played the sound of the bird which he 
is reading about. 

It will be appreciated that the size of the data storage 
means in the apparatus of the present invention will be 
finite. As such, and to avoid the problem of either 
having to delete and loose a previously acquired set of 
data, or having to acquire a new apparatus, the 
apparatus of the present invention is configured so that 
it can export some or all of the data stored in the data 
storage means. To prevent duplicatable and readable 
copies of the data being exported, the apparatus is 
configured only to export the data in an encrypted form. 
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It is clearly desirable that the exported data can be 
imported back onto the apparatus of the present 
invention, so that the data can be viewed again at a 
later date. 

5 

The data is preferably exported to and imported from a 
dedicated data store adapted to interact with the 
apparatus of the present invention. In the first 
preferred embodiment, the method of transfer of the data 
10 is as follows: 

i) the apparatus enters into electronic communication 
with the data store which sends an identification 
,~ code to the apparatus, 

I 5 

Jf ii) the apparatus confirms the identity of the data 

;8 store and thereby determines what data store 

*f encryption key to use in communicating with the 

p data store, 

20 

p_ iii) the user of the apparatus causes the apparatus to 

transfer preselected data between the apparatus and 
:2 the data store in encrypted form, 

25 iv) the receiver of the encrypted data decrypts that 

data and stores it, 

v) the apparatus transmits a new data store encryption 
key to the data store, which key overwrites the 

30 previous data store encryption key, and 

vi) the communication between the apparatus and the 
data store is broken. 

35 In a second preferred embodiment the method of transfer 

of the data is as follows: 
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i) 



the apparatus enters into electronic communication 
with the data store, 



ii) the user of the apparatus causes the apparatus to 
transfer preselected data between the apparatus and 
the data store in encrypted form, 

iii) the receiver of the data stores the data, and 

iv) the communication between the apparatus and the 
data store is broken. 

In this second embodiment the data store stores the data 
in encrypted form. Preferably there is, however, a 
little un- encrypted data attached to the encrypted data. 
That un- encrypted data can, for example, give an 
indication of the contents of the data, and/ or the 
apparatus that placed the data in the data store and 
consequently the apparatus that can decrypt the data. 
This will allow more than one piece of apparatus of the 
present invention to use the data store. 

In either of the two above described embodiments, the 
data transfer between the apparatus and the data store 
can be either via electrical or optical cables or via 
electromagnetic radiation . 

The apparatus of the present invention may be provided 
with its own power source and/or means for taking power 
from an external power source. 

In one particularly preferred embodiment of the present 
invention, the apparatus is provided with a computer 
chip that has the specification, details and method of 
operation as follows: 
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SPECIFICATION 
EEPROM: 

POWER: 

CONVERSION RATE: 



16 bytes of key memory (addresses 0-15). 
112 bytes of user memory (addresses 16 - 127). 

5mA @5V when active 

6mA @5 V when writing to eeprom 

10uA@5Vin power saving mode. 

approx. 30KPS. 



MASK LOOKUP TABLE 



Rom address 



0 = 255 

1 =254 

2 = 253 

3 = 252 

4 = 251 

5 = 250 



starting with address 0 = 255 the rom table is filled by 
the following formula : 

rom table[ address ] = 255 - address 



250 = 5 

251 =4 

252 = 3 

253 = 2 
254=1 
255 = 0 



ENCRYPTION/DECRYPTION OPERATION 
Version 1 .0 of crypto uses a key length of 16 bytes. 
First write the 16 byte key to eeprom addresses 0 - 15. 

Each byte of key is used to access an 8 bit mask from within a 256 byte lookup table. 
Each data byte is encrypted/decrypted by exclusive oring it with the 8 bit mask. 
As each byte of data is encrypted/decrypted the mask is rotated one bit position to the left. 
After eight bit rotations a new mask is loaded using the next key in the sequence of sixteen. 
The sequence of masks will be repeated again when all sixteen have been used 
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OPERATION MODES 

EEPROM WRITE (mode 0> 

1 . Wait until BUSY Eneisa logic low. 

2. Write number 0 (binary 00000000) to PORTO. 

3. Wait until BUSY line is a logic low. 

4. Write eeprom address (0 - 127) to PORT1. 

5. Wait until BUSY line is a logic low. 

6. Write eeprom data to PORT2. 

Steps 1 & 2 need only be done once to set eeprom write mode. 

DECRYPT DATA (mode n 

1. Wait until BUSY line is a logic low. 

2. Write number 1 (binary 00000001) to PORTO. 

3. Wait until BUSY line is a logic low. 

4. Write data for decryption to PORT2. 

5. Wait until BUSY line is a logic low. 

6. Read decrypted data from PORT3. 

Steps 1 & 2 need only be done once to set data decrypt mode. 

ENCRYPT DATA (mode 2^ 

1. Wait until BUSY Hne is a logic low. 

2. Write number 2 (binary 00000010) to PORTO. 

3. Wait until BUSY line is a logic low. 

4. Write data for encyption to PORT2. 

5. Wait until BUSY line is a logic low. 

6. Read encrypted data from PORT3. 

Steps 1 & 2 need only be done once to set data encrypt mode. 
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EEPROM READ (mode 3) 

1 . Wait until BUSY line is a logic low. 

2. Write number 3 (binary 000000 1 1) to PORTO. 

3. Wait until BUSY line is a logic low. 

4. Write eeprom address (0 - 127) to PORT2. 

5. Wait until BUSY line is a logic low. 

6. Read eeprom data from PORTO. 

Steps 1 & 2 need only be done once to set eepr o m read mode. 

RESET COUNTERS (mode 4) 

This will reset the rotate counter & key index to zero. 

1 . Wait until BUSY line is a logic low. 

2. Write number 4 (binary 00000 100) to PORTO. 

POWER SAVING (mode S) 

This will put the crypto pcb into sleep mode. 

1 . Wait until BUSY line is a logic low. 

2. Write number 5 (binary 00000101) to PORTO. 

3. Wait until BUSY line is a logic zero before proceeding. 
Waking up the crypto unit from power saving mode 

1. Do a dummy read from PORTO or Write a new operation mode to PORTO. 

2. Wait until BUSY line is a logic low before proceeding. 
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20 WAY IDC CONNECTOR PIN OUT & DESCRIPTION 



1. 
2. 
3. 



GND 

+5/3.3 VDC 
\RESET 



4. 


\RD 


5. 


\WR 


6. 


\CS 


7. 


AO 


8. 


Al 


9. 


D7 


10. 


D6 


11. 


D5 


12. 


D4 


13. 


D3 


14. 


D2 


15, 


Dl 


16. 


DO 


17. 


BUSY 


18. 


\BUSY 


19. 


RxD 


20. 


TxD 



Power supply 0 V connection. 
Power supply positive connection- 
Active low external chip reset Leave disconnected if control of 
reset is not required. The chip takes approximately 80mS to reset 
after a low to high transition of the reset pin. 

Active low read control input 
Active low write control input 
Active low chip select input 
Port address select input 
Port address select input 
Bit 7 of bi-directional data bus. 
Bit 6 of bi-directional data bus. 
Bit 5 of bi-directional data bus. 
Bit 4 of bi-directional data bus. 
Bit 3 of bi-directional data bus. 
Bit 2 of bi-directional data bus. 
Bit 1 of bi-directional data bus. 
Bit 0 of bi-directional data bus. 
Active high busy output 
Active low busy output 
Serial data input (do not connect). 
Serial data output (do not connect). 
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